/guides
Leitfäden
Ausführliche, herstellerneutrale Leitfäden zur Auswahl und Nutzung von Sicherheitshardware.
Die Leitfäden erscheinen derzeit auf Englisch. Die folgenden Links öffnen die englische Fassung.
U1 · Authentifizierungs-Hardwareen
How FIDO2, WebAuthn and CTAP stop phishing, the difference between device-bound and synced passkeys, and the criteria that matter when buying hardware keys.
U6 · Forensische Akquise-Hardwareen
Hardware versus software write blocking, standalone imagers, NIST CFTT testing, SSD and NVMe pitfalls, HPA/DCO checks and a validation routine for your own acquisition kit.
U7 · Hardware-Forschungslaboren
The equipment for assessing embedded devices you own or are authorized to test: power and measurement, logic analyzers, UART adapters, JTAG/SWD probes, SPI flash readers, and the defenses they reveal.
U4 · Hardware-Walletsen
A security-engineering look at hardware wallets: seed generation, secure elements versus microcontrollers, trusted displays, air-gapped signing, supply-chain attacks and backup design.
U3 · HSMs & Schlüsselverwaltungen
A practitioner's guide to HSMs: what FIPS 140-3 levels actually certify, PKCS#11 and other APIs, network, PCIe, USB and cloud HSMs, quorum controls and key ceremonies.
U8 · Auswahl & Lieferketteen
A vendor-neutral method for selecting security hardware: what FIPS 140-3, Common Criteria and FIDO certifications prove, supply-chain checks on delivery, firmware policy, spares and secure disposal.
U5 · Netzwerk-Appliances & Labor-Firewallsen
How to size a firewall box for a home or corporate security lab: NIC chipsets, AES-NI, RAM for IDS, VLAN design on managed switches, and network TAPs versus SPAN ports.
U7 · Hardware-Forschungslaboren
How SDRs differ in frequency range, bandwidth, ADC resolution and transmit capability, which one fits which defensive task, and the legal and RF-safety guard rails for a radio lab.
U2 · TPM & sichere Enklavenen
What a TPM 2.0 really protects, how PCR measurements and sealing work, discrete versus firmware TPMs, and how to bind BitLocker or LUKS to the boot chain.